Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e31312e302f32342d3332203d3e20323639393236.roa
File:                     3139302e38332e31312e302f32342d3332203d3e20323639393236.roa (raw, json)
Hash identifier:          p8YWtvct7J75knmBbrefdElo0RL+3XZtQi4MeFFOBSg=
Subject key identifier:   8B:E7:60:E6:9A:41:E2:DB:FA:32:2E:5B:AF:4C:63:4E:85:FF:25:6D
Certificate issuer:       /CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
Certificate serial:       4668E304D5240A7AA011F889CF200A1EA96B003C
Authority key identifier: 28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e31312e302f32342d3332203d3e20323639393236.roa
Signing time:             Tue 05 Mar 2024 18:21:51 +0000
ROA not before:           Tue 05 Mar 2024 18:16:51 +0000
ROA not after:            Tue 04 Mar 2025 18:21:51 +0000
asID:                     269926
IP address blocks:        190.83.11.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:68:e3:04:d5:24:0a:7a:a0:11:f8:89:cf:20:0a:1e:a9:6b:00:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
        Validity
            Not Before: Mar  5 18:16:51 2024 GMT
            Not After : Mar  4 18:21:51 2025 GMT
        Subject: CN=8BE760E69A41E2DBFA322E5BAF4C634E85FF256D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:80:e0:36:34:eb:2f:c4:b8:74:bf:b6:fd:
                    4f:cf:d1:b8:02:7d:ca:fd:0e:1b:2e:30:e8:d7:d3:
                    9f:f8:6e:34:23:f2:4e:86:32:e9:40:bd:bf:1f:dc:
                    a0:b1:c7:c9:d2:8d:2d:77:46:45:ec:35:76:4c:05:
                    59:0e:1d:09:23:ef:45:2e:92:f5:f6:1c:9f:91:7a:
                    50:8f:1b:7e:d2:c9:2b:de:82:85:fb:ac:8d:ee:14:
                    b3:67:19:d9:57:d2:13:ce:df:da:bc:0c:c8:2b:d1:
                    6d:fd:00:9d:d5:b9:0e:ea:1e:74:58:9e:0e:b1:a1:
                    51:b9:c8:2e:53:fc:33:fc:54:33:27:af:ca:a6:82:
                    7c:9b:33:2b:d4:d3:4f:f2:e4:dc:82:3d:33:ce:49:
                    90:d4:5d:9d:55:ca:58:c2:99:27:49:a1:19:a0:12:
                    67:65:d2:de:b8:79:15:9b:27:0d:95:1c:1d:21:6d:
                    93:06:22:77:b6:26:8a:96:09:c9:e4:0d:c1:6a:b2:
                    10:dd:4c:74:ff:da:a5:c5:48:57:72:11:e9:17:7d:
                    6b:fe:01:81:32:04:8c:fc:9f:f0:44:72:a0:55:b0:
                    08:36:59:7b:06:9e:0f:6c:5e:b7:6b:70:10:2c:cd:
                    20:e9:e9:3c:a2:a2:79:43:c6:1a:47:fc:63:4e:62:
                    b4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E7:60:E6:9A:41:E2:DB:FA:32:2E:5B:AF:4C:63:4E:85:FF:25:6D
            X509v3 Authority Key Identifier:
                keyid:28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e31312e302f32342d3332203d3e20323639393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:cd:18:57:24:6d:3f:31:d4:2c:ed:e6:d0:b4:27:0e:fd:8b:
         62:43:bd:03:77:49:a9:11:14:a8:d2:56:56:c5:1b:95:3b:c2:
         48:19:7a:69:c1:dc:90:d2:82:2d:87:4b:82:c6:76:a9:79:25:
         d3:f8:3b:fc:65:c0:dd:76:e4:6f:b3:c3:87:fd:e6:98:ba:3e:
         de:29:1d:49:4f:f5:4e:bb:a9:72:d2:d9:06:2c:d2:f0:2b:47:
         78:63:a7:b9:72:0f:e3:d2:57:e9:65:a9:cb:a6:81:3a:38:70:
         15:1d:32:d0:50:b1:aa:26:92:ac:d8:94:ed:b9:0e:8c:18:36:
         75:14:aa:e3:5f:49:0e:7c:66:03:44:d2:cf:7a:a8:c3:c6:71:
         f4:7f:ec:a5:9d:4b:07:a7:24:73:f6:26:dd:6d:99:39:fc:b6:
         94:6a:42:08:63:63:f4:a3:f0:c4:9c:fb:64:d8:ed:33:3c:c5:
         be:e8:53:7e:83:1a:4b:5b:02:6e:b4:bd:3c:2d:3d:6b:27:22:
         d5:63:de:24:e4:d7:e0:e3:e6:e4:80:5d:37:4d:d1:3c:69:a6:
         60:97:cd:ee:da:97:d9:46:dd:80:61:8c:a5:51:b6:8b:18:7a:
         7a:35:b5:c8:2c:18:77:62:9c:c9:58:64:f4:2c:9d:23:7b:4c:
         34:9d:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 23:40:32 2024 by rpki-client on console-fra.rpki-client.org